Bug#474785: [Plash] Re: [cap-talk] Plash: Empowering Security

2008-04-08 Thread Mark Seaborn
On Tue, 2008-04-08 at 01:08 +0300, Timo Lindfors wrote: > Mark Seaborn <[EMAIL PROTECTED]> writes: > > X11 access is not quite innocuous. :-) X is a big can of worms that > > will require a lot of work to make safe. [2] > > Indeed. I today noticed that even with &

Bug#372807: mew calls cancel-timer, not defined in XEmacs

2006-06-11 Thread Mark Seaborn
Package: mew Version: 1:4.2-1 When I invoke mew-draft-send-message to send an e-mail using Mew under XEmacs, it fails with an error saying that cancel-timer is not defined. A little investigation shows that this is a GNU Emacs function, and the XEmacs equivalent is delete-itimer. Using the follo

Bug#334119: Patch to prevent open_not_cancel etc. from being inlined; needed for Plash's modified glibc

2005-10-17 Thread Mark Seaborn
Daniel Jacobowitz <[EMAIL PROTECTED]> wrote: > > Having looked into this, one problem is that it won't work with the > > "libc" and "nptl" builds of glibc that Debian does, because these use > > "int $0x80" directly. It would only work with the "i686" build. So > > this won't work with Linux 2.4

Bug#334119: Patch to prevent open_not_cancel etc. from being inlined; needed for Plash's modified glibc

2005-10-16 Thread Mark Seaborn
Daniel Jacobowitz <[EMAIL PROTECTED]> wrote: > On Sat, Oct 15, 2005 at 06:51:19PM +0100, Mark Seaborn wrote: > > Package: glibc > > Version: 2.3.5-6 > > Severity: wishlist > > Tags: patch > > > > Usually, glibc inlines calls to non-cancellab

Bug#334120: Patch to include more files from the build tree in libc6-pic: allows Plash to build custom glibc

2005-10-15 Thread Mark Seaborn
Package: glibc Version: 2.3.5-6 Severity: wishlist Tags: patch This patch changes rules.d/debhelper.mk to copy various files from the glibc build tree into the libc6-pic package. This allows Plash to build its modified version of glibc from libc6-pic. Background: Plash is a secure, restricted ex

Bug#334119: Patch to prevent open_not_cancel etc. from being inlined; needed for Plash's modified glibc

2005-10-15 Thread Mark Seaborn
Package: glibc Version: 2.3.5-6 Severity: wishlist Tags: patch Usually, glibc inlines calls to non-cancellable versions of some system calls, such as open_not_cancel. The macro definitions are in sysdeps/unix/sysv/linux/not-cancel.h. This patch prevents those definitions from being inlined. It